Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3N6tV9c-pvfeIUMLzT8nokvD9BU.cer
File:                     3N6tV9c-pvfeIUMLzT8nokvD9BU.cer (raw, json)
Hash identifier:          QRNy4ZnV7lGazEE3nD9tFNZVi0kQ610imxpcLN2Aen0=
Subject key identifier:   DC:DE:AD:57:D7:3E:A6:F7:DE:21:43:0B:CD:3F:27:A2:4B:C3:F4:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       B35DE5C5D9
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/42/5955a3-2d2d-4920-9148-1768f3d435c4/1/3N6tV9c-pvfeIUMLzT8nokvD9BU.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/42/5955a3-2d2d-4920-9148-1768f3d435c4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 20 Jun 2022 17:50:32 +0000
Certificate not after:    Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources:    AS: 206016

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 770374485465 (0xb35de5c5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jun 20 17:50:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dcdead57d73ea6f7de21430bcd3f27a24bc3f415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:86:b4:f6:9d:fc:af:fc:8e:27:a5:8c:eb:95:
                    a8:aa:bc:01:4b:b3:b6:de:83:c4:bf:93:1a:05:4f:
                    17:4b:4e:f7:43:69:d3:01:64:bf:de:a8:f9:61:0a:
                    1f:93:c9:af:8a:57:6c:80:b3:b2:de:86:65:07:2a:
                    6f:a7:fa:af:4a:03:b1:9c:f5:05:2a:75:7c:a2:09:
                    a3:27:17:ea:07:d5:27:78:3d:04:cb:f1:38:f1:bb:
                    41:58:70:6e:c9:16:8c:84:64:fb:ac:98:44:95:5d:
                    21:e8:49:f9:2b:38:70:1b:18:9e:e0:9d:88:9a:d7:
                    f4:aa:ad:76:6b:fd:ef:98:e5:d5:58:19:28:7f:22:
                    95:5e:36:65:39:58:c3:7e:01:df:4b:a1:02:18:a7:
                    6c:7d:a3:40:4e:f8:d7:f3:2f:05:05:af:df:02:21:
                    2d:98:30:39:59:cb:7a:89:40:0d:bf:a3:f6:46:30:
                    50:67:40:64:1c:49:00:77:86:0e:dd:56:5d:76:12:
                    3c:c4:b3:7d:70:fc:27:ef:42:55:c3:17:15:43:a5:
                    1d:b7:53:b8:f7:cc:33:6e:1c:31:0d:bf:a3:8e:3a:
                    2f:b0:29:62:fe:3b:42:d6:66:37:87:c1:1d:87:0e:
                    ca:08:4d:b2:ad:11:cf:c0:45:49:d7:23:34:f0:86:
                    6f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DE:AD:57:D7:3E:A6:F7:DE:21:43:0B:CD:3F:27:A2:4B:C3:F4:15
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/5955a3-2d2d-4920-9148-1768f3d435c4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/5955a3-2d2d-4920-9148-1768f3d435c4/1/3N6tV9c-pvfeIUMLzT8nokvD9BU.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206016

    Signature Algorithm: sha256WithRSAEncryption
         17:07:e4:9d:a4:52:8a:8e:b6:7d:8b:e5:49:6c:b1:da:25:f1:
         6a:bc:99:d9:79:a7:6c:b2:3d:fe:d5:e5:03:ed:d6:28:c4:ec:
         0d:59:92:0d:6c:fb:06:15:c8:de:8a:6f:9c:61:23:79:ad:b8:
         71:0d:79:a9:4e:90:cc:23:4d:e1:60:fc:a6:3c:eb:ae:cd:96:
         73:3f:a5:ab:8d:db:36:5b:19:ce:ae:27:7e:50:07:4c:c8:3e:
         e7:69:bd:61:a5:06:ca:c8:a0:54:24:ef:14:a9:7c:ef:80:86:
         6a:e4:cf:be:5a:f3:6a:ba:0a:d8:07:d3:a3:75:3d:9d:e2:63:
         c4:97:49:85:72:5b:4c:35:04:aa:f6:a7:96:7f:5d:45:31:39:
         db:67:40:4a:7b:95:f0:48:6c:f0:b0:34:e2:87:85:f9:4a:e6:
         49:03:ca:df:e4:10:cc:a1:aa:2e:99:8f:6d:46:89:73:9a:42:
         92:07:4b:0b:1e:17:97:62:9b:19:7b:1f:b0:d4:72:48:44:c5:
         cf:11:1d:3c:d8:06:1d:af:44:03:19:13:bb:f4:9a:28:6f:82:
         1d:6d:81:ca:4d:b7:78:3d:4f:6b:3a:35:7a:ef:9f:b7:d4:9a:
         e4:cf:b0:2b:32:7b:90:9b:80:3c:66:c5:46:cc:17:ba:64:02:
         e0:f5:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----